Information Security Measures Research Articles

Improving the training on creating a distance learning platform in higher education: evaluating their results

The COVID-19 pandemic has had a profound impact on the world, and one of the many changes it has brought about is the shift to distance learning in Kazakhstan’s universities. However, both teachers and students were ill-prepared for this sudden change. In some remote villages, lack of internet access meant that students had no access to online classes at all. To address this issue, universities had to rent foreign platforms, but these platforms had inadequate information security measures in place. To address these challenges, it is necessary to create a robust and secure independent platform for distance learning. This platform will be particularly important for training teachers of “Informatics” in the context of distance learning. This article presents methods and schemes for creating a distance learning platform specifically for training computer science teachers. The introduction of the “Education-Online Platform” discipline at the university has yielded promising results. As a result, a distance learning platform has been created, and this new discipline has been introduced and tested in the educational program of a particular university in the training of future specialists.

Cyber Security Threats to Iran and its Countermeasures: Defensive and Offensive Cyber Strategies

Iran's convoluted geopolitical status, its centrality to locale-specific wars, plus the shifting balance of the global order make cyber security a key issue worldwide in addition to traditional security challenges. Iran is an appealing target for cyber enemies due to its numerous security vulnerabilities, which include ransomware infection, scams, as well as complicated malware. Iran has taken a flexible stance, via collaboration, authorized, and intellectual tactics to counter these concerns. Forming cyber security teams, utilizing the latest innovations, and hiring competent employees are all examples of efforts in cyber defense. Legislative structures are essential for bringing criminals before the law and discouraging unlawful behaviour, but the dynamic nature of cyber threats makes it difficult to update rules. The goal is to keep information security and safety measures under check. The identification and mitigation of cyber dangers necessitate collaboration with various nations, global organizations, and corporations. Iran's cyberspace involvement shapes societal sentiment and upholds the will of the people, with both advantageous and hazardous repercussions. To bolster its application and balance its powerful adversaries, it employs cyber assaults in conjunction with conventional asymmetrical combat strategies. What is Iran's main cyber security concerns and challenges, and how is Iran addressing as well as tackling them, is the question that this study aims to answer.

Implementation of Hardware, Software and Workstation Information Security Measures in Federal University Libraries of Nigeria

Implementation of Hardware, Software and Workstation Information Security Measures in Federal University Libraries of Nigeria

The Intersection of Algebra and Cryptography: Enhancing Information Security through Mathematical Foundations

The rapid advancements in digital technologies have necessitated the development of robust information security measures. This paper explores the intersection of algebra and cryptography, focusing on how algebraic principles can enhance cryptographic techniques to provide stronger security foundations. By leveraging mathematical structures such as groups, rings, and fields, we can address critical challenges in encryption, secure communications, and data privacy. This study reviews key algebraic methods used in contemporary cryptographic protocols, including elliptic curve cryptography, homomorphic encryption, and lattice-based cryptography, and demonstrates their practical applications through detailed case studies. Our comparative analysis highlights the superior performance and security of algebra-based cryptographic solutions compared to traditional methods. Finally, we discuss the emerging trends and future directions in algebraic cryptography, emphasizing the potential of these mathematical foundations to address the evolving threats in information security.

The Intersection of Algebra and Cryptography: Enhancing Information Security through Mathematical Foundations

The rapid advancements in digital technologies have necessitated the development of robust information security measures. This paper explores the intersection of algebra and cryptography, focusing on how algebraic principles can enhance cryptographic techniques to provide stronger security foundations. By leveraging mathematical structures such as groups, rings, and fields, we can address critical challenges in encryption, secure communications, and data privacy. This study reviews key algebraic methods used in contemporary cryptographic protocols, including elliptic curve cryptography, homomorphic encryption, and lattice-based cryptography, and demonstrates their practical applications through detailed case studies. Our comparative analysis highlights the superior performance and security of algebra-based cryptographic solutions compared to traditional methods. Finally, we discuss the emerging trends and future directions in algebraic cryptography, emphasizing the potential of these mathematical foundations to address the evolving threats in information security.

Multi-Attack Intrusion Detection for In-Vehicle CAN-FD Messages.

As an enhanced version of standard CAN, the Controller Area Network with Flexible Data (CAN-FD) rate is vulnerable to attacks due to its lack of information security measures. However, although anomaly detection is an effective method to prevent attacks, the accuracy of detection needs further improvement. In this paper, we propose a novel intrusion detection model for the CAN-FD bus, comprising two sub-models: Anomaly Data Detection Model (ADDM) for spotting anomalies and Anomaly Classification Detection Model (ACDM) for identifying and classifying anomaly types. ADDM employs Long Short-Term Memory (LSTM) layers to capture the long-range dependencies and temporal patterns within CAN-FD frame data, thus identifying frames that deviate from established norms. ACDM is enhanced with the attention mechanism that weights LSTM outputs, further improving the identification of sequence-based relationships and facilitating multi-attack classification. The method is evaluated on two datasets: a real-vehicle dataset including frames designed by us based on known attack patterns, and the CAN-FD Intrusion Dataset, developed by the Hacking and Countermeasure Research Lab. Our method offers broader applicability and more refined classification in anomaly detection. Compared with existing advanced LSTM-based and CNN-LSTM-based methods, our method exhibits superior performance in detection, achieving an improvement in accuracy of 1.44% and 1.01%, respectively.

Evaluation of the Impact of Risk Management and Information Security on Cybersecurity Maturity of the Institute ABC Data Management Application

In the contemporary digital landscape, organizations face an escalating array of cyber threats that imperil the security and confidentiality of their data assets. This quantitative study investigates the impact of risk management strategies and information security measures on the cyber security maturity of ABC Institute's data management application. Survey data were collected from 122 employees directly engaged in data management and security roles within the institute, and Structural Equation Modeling (SEM) with Partial Least Squares (PLS) was employed for data analysis. The findings reveal significant positive associations between risk management practices, information security measures, and cyber security maturity. These results emphasize the crucial role of comprehensive risk management strategies and robust information security measures in bolstering cyber resilience. Practical recommendations stemming from this study provide actionable insights for organizations aiming to fortify their cyber security posture.

Following the herd? An empirical investigation into the adoption of mobile payment systems

PurposeThe adoption of mobile payment remains low in certain regions, highlighting the need to identify the factors that enable and inhibit its adoption. This study aims to address this gap by investigating the role of information security, loss aversion and the moderating influence of the herd effect on Inertia and behavioral intentions in the adoption of mobile payment systems.Design/methodology/approachA structural equation model was developed and tested with 332 valid questionnaires to examine the proposed hypotheses.FindingsThe empirical results reveal that information security plays a significant role as an enabler, while loss aversion acts as an inhibitor of mobile payment adoption. Furthermore, the study uncovers the moderating influence of the herd effect on the relationship between Inertia and behavioral intentions.Research limitations/implicationsThis study was conducted in a specific region and may not be generalizable to other regions. Future studies could expand the sample size and scope to enhance the external validity of the findings.Practical implicationsThis study offers practical implications for mobile payment service providers. Understanding the key enabling and inhibiting factors identified in this study can guide providers in designing and improving their services. Strengthening information security measures can help build trust among potential adopters, while offering incentives can mitigate the impact of loss aversion and encourage early adoption.Social implicationsThe findings of this study have social implications as they contribute to promoting the adoption of mobile payment systems. Increased adoption can enhance financial inclusion and stimulate economic development.Originality/valueThis study provides novel insights into the enabling and inhibiting factors of mobile payment adoption and highlights the moderating role of the herd effect. By shedding light on the influence of social norms on individual behavior in the context of mobile payment adoption, this study contributes to the existing literature and advances our understanding of this phenomenon.

Az információbiztonság időszerű kérdései a magyarországi kkv-k körében

Összefoglalás. A tanulmány célja az információbiztonság vizsgálata a magyarországi kis- és középvállalkozások (kkv-k) körében. Tanulmányunk aktualitását az adja, hogy az Európai Unió Bizottsága által évente kiadott Digitális Gazdaság és Társadalom Indexe szerint a magyarországi kkv-kat alacsony adat- és információbiztonsági szint jellemzi. Kutatásunk során egyaránt alkalmaztunk kvalitatív és kvantitatív módszereket. Az előbbinél dokumentumelemzéssel megvizsgáltuk, hogy a hazai szakirodalom milyen fontosabb információbiztonsági kihívásokat azonosít, illetve interjúk segítségével feltérképeztük a kkv-k információbiztonsági gyakorlatait és kihívásait, az utóbbinál pedig egy online, nagymintás kérdőív révén vizsgáltuk a szektor vezetőinek információbiztonsággal kapcsolatos véleményét, fejlettségét. Summary. The aim of the study is to examine information security among small and medium-sized enterprises (SMEs) in Hungary. The relevance of our study is that, according to the Digital Economy and Society Index published annually by the Commission of the European Union, Hungarian SMEs are characterised by a low level of data and information security. In our research, we used both qualitative and quantitative methods. In the former, we conducted a document analysis to identify the main information security challenges identified in the domestic literature and mapped the information security practices and challenges of SMEs through interviews, while in the latter, we used an online, large-scale questionnaire to investigate the views and development of the sector’s managers on information security. The findings of our study are based on the responses of 150 SME managers and 31 IT professionals working in the sector. We divided our questionnaire into six sections: demographics, business profile, device usage, digital habits, information security awareness survey based on the international HAIS-Q, information security awareness in daily practice. In the present research we deviated somewhat from the international model, firstly because we had to adapt the model to the domestic requirements and our research objectives, and secondly because this model was only a part of our questionnaire. During the research we have clearly identified the need to develop and implement practice-oriented training programmes that can help managers and IT professionals in the domestic SME sector to develop their information security awareness and even to make the transition to Industry 4.0. Based on the responses to the interview questions, it can be concluded that, overall, SME managers and their organisations are increasingly starting to build cybersecurity solutions and information security measures around their organisation. There is still a need to develop and share information security good practices that can reach SMEs, as there is a need for training and exchange of experiences, but not all companies are fully committed to the issue, so the actual need for action and organisation is ultimately lagging behind. A small proportion of the organisations surveyed have been victims of a cybersecurity incident and a good proportion of SME managers believe that until an incident has happened to an employee or the organisation, they will not learn from it. Basically, there is a growing demand for increased security and the use of security tools and education in information security, but this is evolving as a slow process and not as fast as the world around us is changing, so it is questionable when an information security explosion will occur that may radically change the tools and attitudes of organisations.

Navigating the Cloud: A Comprehensive Study on Information Security in Cloud Computing By IJISRT

As cloud computing continues to revise the way associations store, process, and manage data, the need for robust information security measures becomes decreasingly critical. This study delves into the multifaceted geography of information security in pall computing, examining crucial challenges, arising pitfalls, and stylish practices for securing sensitive data in the pall terrain. Through a comprehensive analysis of security fabrics, encryption ways, access controls, and compliance norms, this exploration aims to give perceptivity and recommendations for associations seeking to enhance their security posture in the period of pall computing. By addressing issues similar as data sequestration, authentication, and adaptability against cyberattacks, this study contributes to the ongoing converse on information security in pall computing and offers practical strategies for mitigating pitfalls and icing the integrity of pall- grounded services.

An empirical analysis of evolutionary computing approaches for IoT security assessment

The Internet of Things (IoT) strategy enables physical objects to easily produce, receive, and exchange data. IoT devices are getting more common in our daily lives, with diverse applications ranging from consumer sector to industrial and commercial systems. The rapid expansion and widespread use of IoT devices highlight the critical significance of solid and effective cybersecurity standards across the device development life cycle. Therefore, if vulnerability is exploited directly affects the IoT device and the applications. In this paper we investigated and assessed the various real-world critical IoT attacks/vulnerabilities that have affected IoT deployed in the commercial, industrial and consumer sectors since 2010. Subsequently, we evoke the vulnerabilities or type of attack, exploitation techniques, compromised security factors, intensity of vulnerability and impacts of the expounded real-world attacks/vulnerabilities. We first categorise how each attack affects information security parameters, and then we provide a taxonomy based on the security factors that are affected. Next, we perform a risk assessment of the security parameters that are encountered, using two well-known multi-criteria decision-making (MCDM) techniques namely Fuzzy-Analytic Hierarchy Process (F-AHP) and Fuzzy-Analytic Network Process (F-ANP) to determine the severity of severely impacted information security measures.

Business Process Outsourcing 14 Cybersecurity KPIs Towards a Strategic Information Security

In today’s rapidly evolving digital landscape, the Business Process Outsourcing (BPO) industry faces an ever-increasing threat of cyber-attacks and data breaches, underscoring the critical importance of robust information security practices. To address these challenges, organizations must develop effective strategic information security, supported by reliable performance measurement tools such as Key Performance Indicators (KPIs). This research aims to investigate the information security implemented by BPO companies and their utilization of the 14 cybersecurity KPIs to track and enhance their information security measures. A mixed-methods strategy is used in the study, integrating qualitative and quantitative techniques. The qualitative component involves thematic analysis of key informant interviews, while the quantitative component entails the analysis of Likert-scale questionnaires and numerical data. The findings of this research provide valuable insights into the significance of strategic information security in achieving effective information security management within the BPO industry. The study reveals the specific elements incorporated in these plans, such as risk assessment methodologies, security controls implementation, employee training, incident response strategies, and compliance measures. The implications of this study offer valuable insights for BPO organizations to develop robust strategic information security tailored to their specific context, ensuring effective alignment with organizational objectives and risk management strategies. Moreover, the research contributes to the existing literature on information security management frameworks, emphasizing the role of cybersecurity KPIs in evaluating security performance. Keywords: cybersecurity, information security, KPI, business process outsourcing industry, information security management

Leveraging Technology for Government Service Delivery: Suggestions for Securing the e-Citizen Service in Kenya

Governments across the world have increasingly embraced e-governance in the provision of public services. This development has significantly reduced bureaucracy, enhanced efficiency, reduced corruption and fundamentally transformed public service delivery. However, the adoption of these copyright technology solutions, owned by international corporations and non-state actors, mostly multinational corporations (MNCs), have equally exposed user governments, such as Kenya, to significant cyberspace security threats, service disruptions and exposed national security leading to interferences in national autonomy and at times threatened national sovereignty. The threats arise from the activities of offensive states, malicious non-state actors and individuals taking advantage of the integrated and dependent internet connectivity networks. This paper is an extract from a study conducted on Information Security Threats to e-Citizen services in Kenya. The research presents findings on the effectiveness of information security measures initiated to secure the e-Citizen services in Kenya. The case study adopted a mixed method design combining cross-sectional and descriptive research design that targeted 12,000 respondents (users) from 51 Huduma Centres countrywide. Purposive sampling was applied to select 10 Huduma centres and 10% of respondents from each of the selected centres. About 1,200 questionnaires were issued with a return rate of 80% which translates to 966 responses. The study applied both quantitative and qualitative techniques in analysis. The study identified 10 categories of security measures which are discussed in this paper categorized under legislation and policy; infrastructure and capacity development; protective action; monitoring and oversight. From the findings, Kenya has implemented the measures of information security to a satisfactory level even though more is needed in terms of engaging the populace to enhance safe data use, handling and storage. In order to bolster a safe service delivery e-Citizen system, the study recommends locally modelled technological solutions, mutually beneficial cyber security collaborations, frequent infrastructure security audits, user capacity training and restructuring national security organs to create cyberspace manning capabilities. These sectoral changes will enhance preventive, defensive and offensive capabilities against arising cyberspace threats from geopolitical, technological, economic and security competition and rivalries among global nations, non-state actors and malicious individuals

Network awareness of security situation information security measurement method based on data mining

Awareness of Network Security Situation (abbreviated as NSS for short) technology is in a period of vigorous development recently. NSS technology means network security situational awareness technology. It refers to the technology of collecting, processing, and analyzing various real-time information in the network to understand and evaluate the current network security status. It can not only find network security threats, but also reflect the NSS in the system security metrics, and provide users with targeted security protection measures. Based on data mining methods, this paper analyzed and models perceived threats and security events with data mining algorithms, and improved information security measurement methods based on association analysis. This paper proposed network security information analysis and NSS based on data mining, and analyzed the experimental results of network awareness of NSS information security measurement. The experimental results showed that when the Timer was 8, the accuracy of the awareness of NSS information security measurement method based on data mining can reach 92.89%. The data mining model had the highest accuracy of 93.14% in situation understanding and evaluation of KDDCup-99 dataset. The results showed that the model can accurately predict the NSS. When Timer was 6, the highest accuracy of the model was 92.71%. In general, the NSS prediction mining model based on KDDCup-99 can better understand, evaluate and predict the situation.

Privacy concerns among the users of a national patient portal: A cross-sectional population survey study

IntroductionSeeking and receiving care requires disclosure of personal information which is recorded as health data in electronic health records. Thereafter, restricting the flow of information is dependent on data protection, information security, ethical conduct, and law. Privacy concerns may arise as patients’ options concerning privacy have been balanced to cater both the privacy of patients and the needs of healthcare, as well as secondary use of data. MethodsThis study examined privacy concerns among the users of a national patient portal in a representative sample of Finnish adults aged 20 to 99 years old (n = 3,731). We used logistic regression analysis with population weights to seek answers to which factors are associated with privacy concerns. The cross-sectional survey data was collected in 2020. ResultsEvery third patient portal user had privacy concerns. Those who were 50 to 59 years old (p = 0.030) had privacy concerns more often than 20 to 49-year-olds. Those who had financial difficulties (p = 0.003) also had privacy concerns more often while those, who had good digital skills (p=<0.026), did not need guidance on telehealth service use (p=<0.001) and found telehealth service use to be beneficial (p = 0.008), had privacy concerns less often. ConclusionThe usefulness of telehealth seems to play an important role in privacy concerns. Another important factor is the skills required to use telehealth services. We encourage providing guidance to those who lack the necessary skills for telehealth service use. We also encourage putting effort not only into data protection and information security measures of telehealth services, but also into providing transparent and comprehensible privacy information for the service users as privacy concerns are common.

Тенденции цифровизации российского рынка финансовых услуг

The subject of the study is the interaction of business entities in the use of financial services in the context of the digital transformation of the economy. The objectives of the work are to identify trends in the development of the financial services market and the impact of technology on its formation, to establish the features of digitalization of the financial services market through the use of systematic, economic and statistical analysis methods to adapt business entities to changing economic conditions, to make informed decisions on the use of services that will meet the needs of customers. The sectors of financial services provided have been identified and their classification according to technological, organizational and consumer characteristics has been developed. The trends of Internet banking in Russia have been established and the prospects for financing companies in the context of digitalization have been predicted. Information security measures have been defined. The concept of a business ecosystem is formulated. Conclusions are drawn that when choosing multivariate sources of financing, business entities should take into account the trends of changes in each market segment based on an integrated approach to the rational use of modern financial services in the context of the digital transformation of the economy.

Financial Support for Information Protection Measures: Problems and Solutions

Aim . Coverage of the problem of ensuring economic security in conditions of insufficient financing of information protection measures both from the state, which establishes requirements for the protection of restricted access information of various types, ranging from state secrets to personal data of citizens, and from organizations that implement these requirements.Tasks. Formation of proposals to overcome difficulties in the implementation of financial measures to ensure the protection of information in organizations in order to implement measures to ensure economic security.Methods. In this paper, using the methods of factor, statistical and quantitative analysis, statistical information in the field of financing information protection measures is considered, the parameters of financing some measures are estimated based on open data presented in the Unified Information System in the field of procurement, as well as the provisions of legal acts of the Russian Federation in the field of information security and public-private partnership and an attempt has been made to prove the existence of problems in the financing of information protection measures.Results . It is proved that ensuring the economic security of nuclear power plants (on the example of the Russian Federation) on the basis of financial support for information protection measures is one of the most pressing problems in the modern digital world. Every year, threats to the security of information systems are becoming more complex and sophisticated, requiring organizations and companies to make additional efforts and resources to effectively counter. Practical ways of solving the problem of financing information protection measures in order to ensure economic security are proposed, using both the possibility of expanding public-private partnership in this area and other measures that organizations can directly use.Conclusions . Despite the need to ensure economic security, many organizations face financial difficulties in implementing information security measures. Limited budget funds, improper allocation of resources, inefficient financing strategy, difficulties in finding and purchasing effective Russian software and technical means of information protection in the conditions of sanctions impact on the Russian Federation – all these are obstacles to the successful provision of economic security.

ANALYSIS MATURITY LEVEL MEDICAL SERVICES ELECTRONIC USING COBIT 5 FRAMEWORK (CASE STUDY: RSUD XYZ)

The objective of this study is to develop an audit strategy for information system security at XYZ General Hospital, perform a comprehensive security assessment of the REMPEYEK (Electronic Service Medical Record) information system, and provide recommendations for improvement. Quantitative research is a methodology that involves the collection of data through direct assessment of the individuals or entities under investigation. In addition, the COBIT 5 tool is employed to analyze the gathered data in order to acquire a quantitative capability analysis. This study examines the COBIT 5 framework's relevance to the identification of business objectives for information system security in the context of the Rempeyek information system. The identified problems and obstacles in the system include inadequate budget management, insufficient coordination between Diklitbang and the units involved in application development, and a misalignment between information technology systems and security measures. The findings of the assessment on the maturity of the information system security indicate that the DSS05 and APO13 domains have achieved a level 2 status, known as "Managed Process." The capability values for these domains are recorded as 2.02 and 2.68, respectively. This suggests that the relevant procedures have been effectively executed, supervised, and regulated.

Методы кодирования информации на базе трехмерного параллелепипеда на уроках математики

Social informatization requires strong information security measures that would allow companies and individuals to protect their data. Courses in information security may solve this problem. However, methods of coding and encryption can be incorporated in the school curriculum as part of Mathematics and Computer Science. This article introduces an original reliable method of encoding to be integrated with the high school course of Mathematics. The authors used geometric methods of representing points in three-dimensional space bounded by a closed parallelepiped and elementary algebraic operations with matrices. The paper proposes flow and k-gram variants of the matrix method of text encoding and their program implementation in the Python programming language. The encoding methods require no special mathematical training, which makes them teachable to 9–11-graders. By mastering these methods, high-school students can increase their personal information security and develop an algorithmic style of thinking, as well as mathematical skills in general. The article contains some extramural tasks that consolidate practical skills of text coding. The academic and methodological materials make it possible to give the methods of coding and encryption while teaching Mathematics, as well as part of academic disciplines related to information security.

A comprehensive application architecture for unlocking the potential of student feedback

This article proposes a novel solution aimed at streamlining the student feedback, enabling them to assess various aspects and activities within their institution. Different from the classical solution of collecting students feedback using a set of questions grouped in one or many forms, we designed a solution capable to empower students of all age groups to enhance their higher education experiences by openly expressing opinions about their enrolled faculties, providing valuable guidance to prospective college students. Our proposal introduces a generic application architecture designed to integrate the presentation of the main opportunities and offers from many universities with the student reviews on all aspects of these universities. Thus, we avoid a number of factors that reduce the quantity and objectivity of student feedback. Important elements in our architecture refer to reviewing and rating system as well as the search system which facilitate the use of the existing evaluations on different aspects of an university. We devised a generic architecture for a client-server application, specifying a minimum set of required functionalities. For validation, we designed and implemented a client-server application based on the generic architecture we outlined. The application offers several key advantages, including robust information security measures, and diverse communication channels for authenticated users within the platform. The application’s architecture includes an encryption system based on multiple encryption techniques. Additionally, an algorithm for search optimization within the platform have been developed, further enhancing its utility.